General

  • Target

    1544-212-0x0000000000FA0000-0x0000000000FD2000-memory.dmp

  • Size

    200KB

  • MD5

    d2137463d116f09ec37a96d8b96a1dfa

  • SHA1

    2cd4fab99fdecea6cb52cf3c0c216bd892f8360d

  • SHA256

    896b93a5f8ab9809c3bd7dd611934f4296eb6d8ef13673cffaa93b271ab7b2b5

  • SHA512

    cd19f94d5e41998d653daa7e22aedafdd1566d8c4100046168b55a091e3d402b4c0eedc04fff86248d22883d6af7eb95e4c1faf924ea9e31b314c53245b54ef5

  • SSDEEP

    3072:cxqZWPTa9ApGvgiOTcdkeZ59xhmZxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOF:yqZvgiO6Jxh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

dubka

C2

193.233.20.13:4136

Attributes
  • auth_value

    e5a9421183a033f283b2f23139b471f0

Signatures

Files

  • 1544-212-0x0000000000FA0000-0x0000000000FD2000-memory.dmp
    .exe windows x86


    Headers

    Sections